The withdrawal allowlist limits where money can leave your Polymarket account. When it's on, you can only withdraw to addresses you've saved, and any change to the list takes 48 hours. If someone tricks you into signing a malicious request or takes over your logged-in session, they can't send your funds to their own address.
Note: The allowlist doesn't protect against someone who has your wallet's private key or seed phrase. See What It Doesn't Cover below.
Eligibility
The allowlist is available on accounts that use a Deposit Wallet, the default for every account created since May 4, 2026. Wallet and email logins both qualify.
Accounts with an older Safe or Proxy Wallet don't see the setting yet. To use the allowlist now, create a new Polymarket account.
A flow to upgrade your account type and enable this feature is in the works and will be released shortly.
You need an email address. Security codes and alerts go there.
Turn It On
1. Open the setting
Go to Settings → Account and select Turn on next to Withdrawal allowlist. Read the short overview, then select Get started. If you don't have a verified email yet, you'll add or confirm one with a code before you continue.
2. Add your addresses
Paste each Polygon address and give it a name if you like, for example your hardware wallet or an exchange deposit address. You can add several, and they work as soon as setup is done.
Withdrawals addresses can only be on Polygon for now. Before you add an exchange address, check that the exchange accepts one of them on Polygon.
The top of this step shows the email that gets your codes and alerts. To use a different one, select Change to update it in Settings → Profile.
If you sign in with email, your login email is used and can't be changed here.
3. Add a backup email
If you lose access to your primary email, the backup lets you keep managing the allowlist. Enter the code we send to it. You can skip this step, but a backup added later in Settings takes 48 hours.
If you sign in with email, setup skips this step. You can add a backup later in Settings, and support uses it to confirm it's you.
ℹ️ We strongly suggest adding a backup email to always have a secondary verification option.
4. Enter your code
Enter the 6-digit code we send to your primary email. The allowlist turns on right away. If you close setup before this step, it stays off.
Address rules
Polygon addresses only.
You can't add the wallet you sign in with, or your Polymarket Deposit Wallet. This is to protect you in case your login wallet has been compromised.
Names are optional, up to 64 characters.
Names and addresses must be unique. You can save up to 100 addresses.
Withdraw
Pick one of your saved addresses from the list. You can't paste in a new address.
Withdrawals go out on Polygon in USDC or USDC.e. Only crypto withdrawals are available.
A newly added address shows up once its 48 hour activation period is up.
While the allowlist is on, you can't withdraw to another network, and tips to other users only go to addresses on your list. Withdrawals from Perps use the same saved addresses. Deposits and trading work as usual, including selling, redeeming and Combos.
Make Changes
Change | Code needed | Takes effect |
Add an address | Yes | After 48 hours |
Remove an address | Yes | After 48 hours |
Turn off the allowlist | Yes | After 48 hours |
Change your primary email | Yes, from the new and the current email | After 48 hours |
Add or remove a backup email | Yes | After 48 hours |
Make your backup the primary | No | Right away |
While a change is pending, your saved addresses keep working, including one you asked to remove. If you asked to turn the allowlist off, withdrawals stay limited until the 48 hours are up.
We email you when you request a change and when you cancel one, even if you've turned off marketing emails. There's no email when the change takes effect.
A banner shows on every page until the change takes effect.
While the allowlist is on, changing your email in Settings → Profile also takes 48 hours.
You can't remove your only active address. Add another and wait until it's active, or turn the allowlist off.
Cancel a Change
Select Cancel on the pending change in Settings → Account, or use the cancel link in the email. The link works once and doesn't need you to sign in.
Canceling is instant and doesn't need a code.
Important: If you get an email about a change you didn't request, cancel it right away. Someone may have access to your account. Move your funds to a saved address, then contact support.
Lost Access to Your Email
On any code screen, select Can't access this email?
If you have a backup email, you can switch to it. It becomes your primary email and gets the code.
If you sign in with email, your login email stays the primary. Contact support, who can use your backup email to confirm it's you.
If you can't access either email, contact support. We check it's you before changing anything. Changes made through support also take 48 hours, and your allowlist stays on in the meantime.
You can keep withdrawing to your saved addresses.
What It Doesn't Cover
Someone with your wallet's private key or seed phrase. Keep it offline and never share it. Polymarket will never ask for it.
Someone who controls your email inbox. They can request changes, but each one still waits 48 hours. If you sign in with email, your codes go to that same inbox, so keep it secure.
Trades you place yourself, such as selling positions at a bad price.
FAQ
Why do changes take 48 hours?
If someone else requests a change, you have time to see the email and cancel it.
Can I withdraw to the wallet I sign in with?
No. Save a different wallet, or an exchange deposit address that accepts USDC or USDC.e on Polygon.
I didn't get a code
Check your spam folder. You can select Resend code after 60 seconds.
My withdrawal says "Can't check your allowlist"
We couldn't read your list, so nothing was sent. Try again in a few minutes. Trading isn't affected.